Extend Active Agent for Windows Client behind NAT?

[mooks]

Hello Zabbix-Community

I'm using Zabbix since January and so far, I really like it.

However I've an Issue with some Clients.
Some customers only have one single Windows Server, static IP but behind NAT and no option for portforwards...
IPsec or OpenVPN is also not an option…
Also, a raspberry pi or a Linux-VM to configure a Zabbix-Proxy on site is not really an option.

At first, I thought I could solve the Problem with stunnel. But for bidirectional communication I would have to install stunnel client+server on both devices and I would have to create three tunnels.
For one client it would be fine, but i have several clients ->messy

That’s why I’ve tried to configure a active agent with PSK encryption. So for it is working well.
The only Problem I have is, that I can’t extend the number of Items because of the unidirectional communication I can’t use the discovery rules.
Is there any way to add Items to a active agent in Windows?
BR

[mooks]

I've managed to expand the amount of items.
RTFM^^
https://www.zabbix.com/documentation.../activepassive

1. Agent opens a TCP connection
2. Agent asks for the list of checks
3. Server responds with a list of items (item key, delay)
4. Agent parses the response
5. TCP connection is closed
6. Agent starts periodical collection of data

I only had to change the discovery template and its items to active agent, now it is working

->thread can be closed